Mpb
Qqnzbykt
Static task
static1
Behavioral task
behavioral1
Sample
5d217171d8f2890504a767a4dced0e19_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d217171d8f2890504a767a4dced0e19_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5d217171d8f2890504a767a4dced0e19_JaffaCakes118
Size
131KB
MD5
5d217171d8f2890504a767a4dced0e19
SHA1
208781d68e76e1b1df2bde80377aa5b3bfb56de5
SHA256
185db6dacceb73c735413bbea6fb25566d6c00fa2d6e2978015e589d1c6efe48
SHA512
bab2070a5a2c7849cb9fb3e063681572560e906b7eb02e2ed4c7999c67402cc6e797eba4e5b4c8718f00f3d944c39a0b9b3e9d6e34052c3b33f5bf849c2ad303
SSDEEP
3072:Yh54d5LWhz+M+tbH1MMG8RJ60ERVVH3DiaNa/JYUK:Lwz+M+BH1MND04jDiaNXU
Checks for missing Authenticode signature.
resource |
---|
5d217171d8f2890504a767a4dced0e19_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
EnumResourceNamesA
ExitProcess
GetACP
GetCommandLineA
GetFileSize
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetTimeFormatA
LoadLibraryA
RtlUnwind
SetUnhandledExceptionFilter
TlsGetValue
VirtualAlloc
WriteFile
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
ToAscii
ShowCursor
ShowCaret
SetFocus
RegisterClassA
LoadAcceleratorsW
GetMenu
EnableWindow
DestroyIcon
DestroyCursor
DeleteMenu
CreateDesktopW
CreateDesktopA
CharNextA
ShowScrollBar
RegQueryValueA
LsaClose
LsaCreateTrustedDomainEx
LsaDeleteTrustedDomain
LsaEnumeratePrivilegesOfAccount
LsaEnumerateTrustedDomains
LsaGetQuotasForAccount
LsaGetUserName
LsaICLookupNames
LsaLookupNames
LsaLookupPrivilegeDisplayName
RegOpenKeyExA
__vbaAryVarVarg
__vbaBoolStr
__vbaCastObjVar
__vbaFileSeek
__vbaFileCloseAll
__vbaExitEachAry
__vbaDateVar
__vbaCyVar
__vbaCyInt
__vbaCyI4
__vbaCopyBytes
__vbaCheckType
__vbaBoolErrVar
DirectInputCreateA
DirectInputCreateW
DirectInputCreateEx
Mpb
Qqnzbykt
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ